…ndation + kora-runtime first pip package (#209)

Two new pip-installable packages under packages/, extracted from the
in-tree code with full backward-compat shims:

* packages/isokron-client/ — 20 substrate-functional modules lifted
  from plugins/memory/isokron/ (non-provider files only). Pure library
  with zero Kora / Hermes coupling at import time. ANY Hermes-based
  agent can `pip install isokron-client` to gain IsoKron substrate
  primitives: events / reads / control / scratchpad / policy /
  constitution / capability / sea_tickets. README §"BYOA usage
  example" shows a non-Kora custom plugin consuming the library.
  5/5 dry-run wheel-install smoke tests pass in a clean venv.

* packages/kora-runtime/ — 28 modules (7 sub-plugins + orchestrator)
  lifted from kora_cli/reasoning/kora_hermes_plugin/. Declares
  `isokron-client` as a PyPI dep; Hermes is source-only per the
  2026-05-25 operator decision (README documents `git clone
  hermes-agent && pip install -e . && pip install kora-runtime`).
  Entry point `hermes_agent.plugins.kora = kora_runtime:register`
  validated via `importlib.metadata.entry_points()` after dry-run
  install. 5/5 dry-run wheel-install smoke tests + 142/151 in-tree
  tests pass (8 pre-existing Marvin data-dir failures unrelated;
  0 regressions from extraction).

Back-compat shims at plugins/memory/isokron/__init__.py and
kora_cli/reasoning/kora_hermes_plugin/__init__.py do sys.path
bootstrap (mirrors the plugins/marvin/__init__.py POC pattern from
#204) plus sys.modules aliasing of the moved sub-modules. Existing
in-tree imports of the form `from plugins.memory.isokron.X import Y`
and `from kora_cli.reasoning.kora_hermes_plugin.X import Y` continue
working unchanged — no per-file shims, no caller sweep across the
rest of the Kora tree.

§4 STOP-ASK A.1 resolved by operator decision: (B) tight-scoped
extraction. provider.py + active_provider.py + sea_ticket_poller*
stay in plugins/memory/isokron/ as the Hermes-plugin half importing
from isokron-client. kora_cli/clients/kora_control_writer.py +
kora_cli/audit/jsonl_sink.py deferred to Phase 1b (operator task
NousResearch#450). API surface uses real grep'd names (events / reads / control /
scratchpad / policy / constitution / capability / sea_tickets), not
the bucket's audit/conversation/workspace strawman that didn't map
to what was in the tree.

Companion kora-docs PR amends AUDIT.md from 4-package to 5-package
split + closes §7.1 (Hermes source-only) + §7.2 (isokron-client
separate package).

Co-authored-by: CC#3 Kora Runtime <kora-pm@stormhavenenterprises.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>